MEN21 Project Test 1.4

Embed Size (px)

Citation preview

  • 7/25/2019 MEN21 Project Test 1.4

    1/60

    7-6-2015 Nghim thu dch v cho d n

    Confidential

    NGHIM THU DCH V

    Version

    NGHIM THU DCH V CHOD N

    Release

    Version 1.3

    a im : ..........................

    Tnh : ...........................

    Mrng mng MAN-Ethernet Cisco giai on2014-2015 cho mt sVin thng tnh, thnh

    phthuc Tp on Bu chnh Vin thng VitNam

  • 7/25/2019 MEN21 Project Test 1.4

    2/60

    7-6-2015 Nghim thu dch v cho d n 1

    MC LC BI O

    Kt qukim tra................................................................................. 2

    1. Performance Test .......................................................................... 3

    1.1. ISIS Convergence Test ........................................................................... 3

    1.2. LDP Performance Test ............................................................................ 6

    1.3. RVSP-TE Performance Test ................................................................... 9

    2. Multicast Test............................................................................... 12

    2.1. IGMP Test ............................................................................................. 12

    2.2. PIM SSM ............................................................................................... 15

    3. o kim cc dch vMAN-E ....................................................... 19

    3.1. Dch vE-LINE lin tnh ........................................................................ 19

    3.2. Dch vELAN lin tnh........................................................................... 23

    3.3 Dch vHSIipDSLAM Access ............................................................. 27

    3.4 Dch vIPTV-VoD .................................................................................. 30

    3.5 Dch vVoIP .......................................................................................... 34

    3.6 Dch vMobile Backhaul ........................................................................ 37

    4. Service Protection ....................................................................... 41

    5. QoS Test ....................................................................................... 44

    6. Verify Security Configuration ..................................................... 50

    7. IPv6 Test ....................................................................................... 53

    IPv6 over L2VPN ......................................................................................... 53

    IPv6 dual-stack ............................................................................................ 56

  • 7/25/2019 MEN21 Project Test 1.4

    3/60

    7-6-2015 Nghim thu dch v cho d n 2

    Kt qukim tra

    STT Tn bi o K t qu Ghi ch

    1. Performance Test

    1.1. ISIS Convergence Test t Khng t Cha test

    1.2. LDP Performance Test t Khng t Cha test

    1.3. RVSP-TE Performance Test t Khng t Cha test

    2. Multicast Test

    2.1. IGMP Test t Khng t Cha test

    2.2. PIM SSM t Khng t Cha test

    3. o kim cc dch vMAN-E

    3.1. Dch vE-LINE lin t nh t Khng t Cha test

    3.2. Dch vE-LAN lin t nh t Khng t Cha test

    3.3. Dch vHSI ipDSLAM Access t Khng t Cha test

    3.4. Dch vIPTV-VoD t Khng t Cha test

    3.5. Dch vVoIP t Khng t Cha test

    3.6. Dch vMobile Backhaul t Khng t Cha test

    4. Service Protection t Khng t Cha test

    5. QoS Test t Khng t Cha test

    6. Verify Security Configuration t Khng t Cha test

    7. IPv6 Test

    7.1. IPv6 over L2VPN t Khng t Cha test

    7.2. IPv6 dual-stack t Khng t Cha test

  • 7/25/2019 MEN21 Project Test 1.4

    4/60

    7-6-2015 Nghim thu dch v cho d n 3

    1. Performance Test

    1.1. ISIS Convergence Test

    TEST SETUP

    Mc ch bitest

    Kim tra kh nng hi phc sau sc c a giao thc nh tuyn ISIS

    M hnh mng

    M t Giao thc nh tuyn IS-IS thc hin vic nh tuyn cc Router trn mng. Giao thc nhtuyn m bo vic hi phc mng trong thi gian ngn nht sau khi mng c s c .

    Cc bc thc thi :

    - Kim tra cc thng sc a giao thc nh tuyn ang chy trn thit b.

    - Sd ng my o gi lu lng tng ng 1000packet/s

    - Rt link kt ni gia Access v Core.

    - Kim tra s lng packet loss sau khi mng hi phc.

    - Kim tra thng tin nh tuyn ca Router sau khi mng hi phc.

    Mu cu hnh - Trn ASR9k:router isis

    set-overload-bit on-startup 180

  • 7/25/2019 MEN21 Project Test 1.4

    5/60

    7-6-2015 Nghim thu dch v cho d n 4

    is-type level-1

    net 49.0092.1230.2906.0005.00

    nsf ietf

    lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50

    lsp-refresh-interval 65000

    max-lsp-lifetime 65535

    address-family ipv4 unicastmetric-style wide

    metric-style wide level 1

    metric 100

    ispf level 1

    mpls traffic-eng level-1

    mpls traffic-eng router-id Loopback0

    mpls traffic-eng multicast-intact

    spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50

    !

    interface Loopback0

    passive

    address-family ipv4 unicast

    tag 1000

    !

    !

    interface TenGigE0/0/0/1

    circuit-type level-1

    point-to-point

    hello-password keychain ISIS

    address-family ipv4 unicast

    !

    !

    interface TenGigE0/1/0/0

    circuit-type level-1

    point-to-pointhello-password hmac-md5 encrypted 0130322B

    address-family ipv4 unicast

    !

    !

    interface TenGigE0/1/0/1

    circuit-type level-1

    point-to-point

    hello-password hmac-md5 encrypted 0130322B

    address-family ipv4 unicast

    !

    !

    interface TenGigE0/1/0/2

    circuit-type level-1point-to-point

    hello-password hmac-md5 encrypted 0130322B

    address-family ipv4 unicast

    !

    - Trn UPE Router 7600:

    interface GigabitEthernet1/0/1mtu 1560ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64

    ipv6 router isis

  • 7/25/2019 MEN21 Project Test 1.4

    6/60

    7-6-2015 Nghim thu dch v cho d n 5

    no mls qos trustmpls ipisis circuit-type level-1isis network point-to-pointendrouter isisnet 49.0001.0020.0200.2002.00

    is-type level-1passive-interface Loopback0!address-family ipv6redistribute connected

    exit-address-family!

    My o 01 my o truyn lu lng

    01 my o Loopback u xa.

    Ngi test CTIN:

    02 k s ti 2 u.

    Thng stest Ngy thc hin

    Trm

    Thit b

    Kt qu

    mong mun

    - Router c li bng nh tuyn nh trc khi xy ra s c .

    - Thi gian hi tc a mng 150ms

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Chi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    7/60

    7-6-2015 Nghim thu dch v cho d n 6

    1.2. LDP Performance Test

    Mc ch bi test Ki m tra nng lc chuyn mch MPLS LDP ca h th ng

    M hnh mng

    M t - Cu hnh cc thit b trong m ng chy MPLS, dng giao thc LDP lm nhim vtrao i nhn.

    - TTester 1, g i traffic IP n Tester 2 vi cc thng s:

    o Tc : 500Mbps.

    o SA/DA : theo ti liu hng dn nh km. o MTU : 1500 bytes.

    - Kim tra cc thng strn tester.

    Mu cu hnh - Trn ASR9k:mpls ldp

    log

    adjacency

    neighbor

    !

    graceful-restart

    discoverytargeted-hello interval 30

    !

    router-id 123.29.60.5

    session protection

    address-family ipv4

    neighbor 123.29.60.1 targeted

    neighbor 123.29.60.4 targeted

    neighbor 123.29.60.15 targeted

    !

    interface tunnel-te101

    !

    interface tunnel-te102

  • 7/25/2019 MEN21 Project Test 1.4

    8/60

    7-6-2015 Nghim thu dch v cho d n 7

    !

    interface tunnel-te301

    !

    interface tunnel-te302

    !

    interface TenGigE0/0/0/0

    !interface TenGigE0/0/0/1

    !

    - Trn UPE:mpls ipmpls label protocol ldpmpls ldp router-id loopback0!mpls ldp logging neighbor-changes!mpls ldp neighbor passwordint TenGigabitEthernet x/xmpls ip

    Phng tin o AGILENT N2X

    Ngi test CTIN:

    01 k s CTIN/1 thit b

    Thng stest Ngy thc hin

    Trm

    Thit b

    Kt qu

    mong mun

    - Trn Router nhn thy c cc MPLS LDP Neigborshow mpls ldp neighbor

    - C y cc Interface ch y MPLSshow mpls interfaces

    - Bng forwarding-table: a ra y thng tin v b ng FIB.show mpls forwarding

    - Bng LFIB

    - show mpls ldp bindings- Traffic gi tTester 1 sang tester 2 g i nhn thnh cng.- Thng s lu lng ghi nhn:

    o Packet loss:

  • 7/25/2019 MEN21 Project Test 1.4

    9/60

    7-6-2015 Nghim thu dch v cho d n 8

    Chi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI IDIN

  • 7/25/2019 MEN21 Project Test 1.4

    10/60

    7-6-2015 Nghim thu dch v cho d n 9

    1.3. RVSP-TE Performance Test

    Mc ch bi

    test

    Kim tra nng lc truyn ti lu lng qua ng hm sd ng RVSP-TE Tunnel.

    M hnh mng

    M t - Cu hnh 1 dch vEPL gi a MAN-Access1 v MAN-E Access2.

    - Cu hnh kch hot tnh nng MPLS-TE trn cc Router.

    - To 1 tunnel t Access1 n Access 2.

    -

    Kim tra thng sc a Tunnel c to, sd ng lnh :show interface tunnel- TTester 1, g i traffic IP n Tester 2 vi cc thng s:

    o Tc : 500Mbps.

    o SA/DA : theo ti liu hng dn nh km.

    o MTU : 1500 bytes.

    - Kim tra cc thng strn tester.

    Mu cu hnh - Trn ASR9k:interface tunnel-te101description ASR-T101-P-TO-AGG01ipv4 unnumbered Loopback0autoroute announce

    !destination 123.29.60.1fast-reroutepath-option 10 explicit name ASR-T101-P-TO-AGG01logging events link-status!

    explicit-path name ASR-T101-P-TO-AGG01index 1 next-address strict ipv4 unicast 192.168.24.2!

    interface tunnel-te301description ASR-T301-B-TO-AGG01

  • 7/25/2019 MEN21 Project Test 1.4

    11/60

    7-6-2015 Nghim thu dch v cho d n 10

    ipv4 unnumbered Loopback0destination 123.29.60.1path-option 10 explicit name ASR-T301-B-TO-AGG01logging events link-status!

    explicit-path name ASR-T301-B-TO-AGG01

    index 1 exclude-address ipv4 unicast 192.168.24.2!

    - Trn UPE:

    Phng tin o AGILENT N2X

    Ngi test CTIN:

    01 k s CTIN/1 thit b

    Thng stest Ngy thc hin

    Trm

    Thit b

    Kt qu

    mong mun

    - Interface c to c trng thi up.

    - Traffic gi tTester 1 sang tester 2 g i nhn thnh cng.

    - Thng s lu lng ghi nhn:

    o Packet loss:

  • 7/25/2019 MEN21 Project Test 1.4

    12/60

    7-6-2015 Nghim thu dch v cho d n 11

    nh gi t Khng t t 1 phn Khng test

    Chi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    13/60

    7-6-2015 Nghim thu dch v cho d n 12

    2. Multicast Test

    2.1. IGMP TestMc ch bitest

    Kim tra tnh nng nhn bn tin IGMP v2/v3 ca Router ASR9k

    M hnh mng

    Cc bc thchin

    - Cu hnh kch hot cc giao thc PIM trn cc Router trong mng MANE.

    - Ttester 1, g i bn tin IGMPv2 v IGMPv3 join n ASR9k router.

    - Kim tra cc cc host join IGMP trn ASR9k Router.

    - Ttester 1, g i bn tin IGMPv2 v IGMPv3 leave n ASR9k Router.

    Cu hnh mu - Trn ASR9k:multicast-routing

    address-family ipv4ssm range 123interface all enable

    !!router pimaddress-family ipv4interface TenGigE0/1/0/1enable

    !interface TenGigE0/1/0/2enable

    !!router igmpinterface GigabitEthernet0/0/1/8.10version 2

    !router isis danangaddress-family ipv4 unicastmpls traffic-eng multicast-intact

    My o Agilent N2X, PC

    Ngi test

    Thng stest Ngy thc hin

  • 7/25/2019 MEN21 Project Test 1.4

    14/60

    7-6-2015 Nghim thu dch v cho d n 13

    Trm

    Thit b

    Kt qu

    mong mun

    - Kim tra thng strn interface c n c thng tin vIGMP enable:

    RP/0/RSP0/CPU0:ASR#show igmp interface gi0/0/1/8.10Mon Mar 9 06:25:18.491 UTC

    GigabitEthernet0/0/1.8.10 is up, line protocol is upIGMP is enabled on interfaceCurrent IGMP version is 2IGMP query interval is 60 secondsIGMP querier timeout is 125 secondsIGMP max query response time is 10 secondsLast member query response interval is 1 secondsIGMP activity: 6 joins, 0 leavesIGMP querying router is 123.29.60.5 (this system)Time elapsed since last query sent 00:00:12Time elapsed since IGMP router enabled 08:21:24

    Time elapsed since last report received 00:00:03

    - Khi Tester 1 gi IGMPv2 join, trn ASR cn nhn thy host join:RP/0/RSP0/CPU0:ASR#show igmp groupsMon Mar 9 06:35:20.838 UTCIGMP Connected Group MembershipGroup Address Interface Uptime ExpiresLast Reporter232.2.2.2 Loopback0 08:31:26 never123.29.60.5232.2.2.102 Loopback0 08:31:26 never123.29.60.5224.0.0.2 TenGigE0/1/0/1 05:21:44 never

    192.168.34.4224.0.0.13 TenGigE0/1/0/1 05:21:44 never

    Khi Tester 1 gi IGMPv3 join, trn U-PE cn nhn thy host join vicp S,G tng ng

    RP/0/RSP0/CPU0:ASR#show igmp groupsMon Mar 9 06:35:20.838 UTCIGMP Connected Group MembershipGroup Address Interface Uptime ExpiresLast Reporter232.2.2.2 Loopback0 08:31:26 never123.29.60.5232.2.2.102 Loopback0 08:31:26 never

    123.29.60.5224.0.0.2 TenGigE0/1/0/1 05:21:44 never192.168.34.4224.0.0.13 TenGigE0/1/0/1 05:21:44 never

    - Sau khi tester gi IGMP leave,trn Router s khng thy host join na

    Kt qu

    nh gi t Khng t t 1 phn Khng test

  • 7/25/2019 MEN21 Project Test 1.4

    15/60

    7-6-2015 Nghim thu dch v cho d n 14

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    16/60

    7-6-2015 Nghim thu dch v cho d n 15

    2.2. PIM SSM

    Mc ch bi

    test

    Kim tra giao thc PIM SM chy trn Router.

    M hnhmng

    Cc bcthc hin

    - Kch hot giao thc PIM SM trn cc Router trong mng.

    - Khng sd ng Router no lm RP

    - Cu hnh Access List 10 cho di Multicast SSM.- Trn Tester 1, gil p host join vo Source v group (source, 232.0.0.1) theo VLAN

    dnh ring cho Multicast c to sn.

    - Trn Tester 2, gi traffic n group 232.0.0.1. Thng straffic :

    o Speed : 800Mbps

    o MTU : 1344 bytes.

    - Kim tra thng tin vgiao th c PIM SSM trn cc Router trong mng (ng i,RPF).

    - Kim tra kt qutruy n lu lng trn my o.

    Cu hnhmu -

    Trn U-PE Node:

    Interface-Facing DSLAM

    !

    Ip multicast-routing

    ip multicast multipath

    !

    ip igmp ssm-map enable

    no ip igmp ssm-map query dns

    ip pim range 10

    !

    access-list 10 permit 232.1.0.0 0.0.255.255!

    !802.1Q facing port single tag packet

    !

    interface GigabitEthernet3/0/4

    mtu 9000

    no ip address

    logging event link-status

    speed nonegotiate

    spanning-tree portfast trunk

    spanning-tree bpdufilter enable

  • 7/25/2019 MEN21 Project Test 1.4

    17/60

    7-6-2015 Nghim thu dch v cho d n 16

    !

    service instance 120 ethernet

    description EFP for Video Service

    encapsulation dot1q 120

    rewrite ingress tag pop 1 symmetric

    bridge-domain 517 split-horizon!

    !QinQ facing port double tag packets

    !

    interface GigabitEthernet3/0/5

    mtu 9000

    no ip address

    logging event link-status

    speed nonegotiate

    spanning-tree portfast trunk

    spanning-tree bpdufilter enable

    !

    service instance 120 ethernet

    description EFP for Video Service

    encapsulation dot1q 120

    rewrite ingress tag pop 1 symmetric

    bridge-domain 527 split-horizon

    !

    !

    Bridge Domains

    !

    vlan 517

    vlan 527

    !

    interface Vlan517

    description DSLAM1 Trunk Video Edge

    mtu 9000

    ip dhcp relay information trusted

    ip address

    ip helper-address

    no ip unreachables

    ip pim sparse-mode

    ip multicast limit out

    ip access-group 150 in

    !

    !

    interface Vlan527

    description DSLAM2 Trunk Video Edge

    mtu 9000

    ip dhcp relay information trusted

    ip address

    ip helper-address

    no ip unreachables

    ip pim sparse-mode

  • 7/25/2019 MEN21 Project Test 1.4

    18/60

    7-6-2015 Nghim thu dch v cho d n 17

    ip multicast limit out

    ip access-group 150 in

    !

    IGP Injection

    !

    router isis danangpassive-interface vlan517

    passive-interface vlan527

    !

    - Trn ASR 9k:multicast-routingaddress-family ipv4interface all enable

    !!

    router pimaddress-family ipv4interface TenGigE0/1/0/1enable

    !interface TenGigE0/1/0/2enable

    !

    My o Agilent N2X

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Tham s1

    Kt qu

    mong mun

    Kim tra giao thc PIM trn cc Routershow ip pim interfaceshow ip mroute 232.0.0.1(3.0.3.3, 232.0.0.1), 00:16:50/00:02:56, flags: JT

    Incoming interface: TenGigabitEthernet1/0/0, RPF nbr 192.168.14.1, RPF-MFDOutgoing interface list:

    Vlan30, Forward/Sparse, 00:16:50/00:02:07, H

    Kt qu lu lng truyn gia cc tester phi p ng:

    - Packet Loss: 0 packet loss.

    - Latency

  • 7/25/2019 MEN21 Project Test 1.4

    19/60

    7-6-2015 Nghim thu dch v cho d n 18

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    20/60

    7-6-2015 Nghim thu dch v cho d n 19

    3. o kim cc dch vMAN-E

    3.1. Dch vE-LINE lin tnh

    Mc ch bitest

    o kim dch vE-LINE lin t nh

    M hnh mng

    My o

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin

    Cu hnh dch vE-LINE lin t nh

    1. Trn MAN-E (thc hin bi VNPT tnh v CTIN)- Cu hnh Pseudowire EoMPLS thnh t tU-PE 1 t i ASR-1- Cu hnh Pseudowire EoMPLS thhai t U-PE 2 t i ASR-2

  • 7/25/2019 MEN21 Project Test 1.4

    21/60

    7-6-2015 Nghim thu dch v cho d n 20

    2. Trn VN2 core: (thc hin bi VTN)- Cu hnh knh Layer2 gia PE1 v PE2

    Test dch v E-LINE

    3. Kim tra EoMPLS

    Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail

    Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail

    4. Kim tra thng schuy n cc gi tin kch ckhc nhau gi a Tester 1 v Tester 2

    t tc trn link c a UPE Router ni n my o l 1Gbps.Thc hin truyn lu lng gia Tester 1 v Tester 2, s d ng cc tc 75%, x%,100% vi cc kch ckhc nhau: 64, 512, 1024, 1500, 2048. Trong x% l tcm t i , packet loss =0. Thi lng cho mi tc l 90s.Ghi li kt qu nh bng di:

    Tc

    Frame s ze75% x% 100%

    64latencyPacket loss

    jitter75% x% 100%

    512latencyPacket lossjitter

    75% x% 100%

    1024latencyPacket lossjitter

    75% x% 100%

    1500

    latency

    Packet lossjitter75% x% 100%

    2048latencypacket lossjitter

    5. Kim tra vic p dng cc policy-map trn router

    show policy-map interface

  • 7/25/2019 MEN21 Project Test 1.4

    22/60

    7-6-2015 Nghim thu dch v cho d n 21

    6. Kim tra thng sCPU trn thi t b:

    show process cpu

    Cu hnh mu - U-PE Router

    Policy-map 5M

    Class class-default

    Police 5000000

    Interface gi1/0/0

    Description Connect to Tester

    service instance 100 ethernet

    encapsulation default

    xconnect 100 encapsulation mpls

    service-policy input 5M

    - ASR Router

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    !

    l2vpn

    xconnect group E-LINE

    p2p E-LINE

    interface GigabitEthernet0/0/1/0.100

    neighbor ipv4 pw-id 100

    !

    Kt qumong mun

    1. Cc EoMPLS PW u tr ng thi UP

    2. Tc truy n thng cc loi gi tin gia Tester 1 v Tester 2 c m bo nhcu hnh ca tng gi cc:

    Tc

    Frame size75% x% 100%

    64 latency

  • 7/25/2019 MEN21 Project Test 1.4

    23/60

    7-6-2015 Nghim thu dch v cho d n 22

    1500latency

  • 7/25/2019 MEN21 Project Test 1.4

    24/60

    7-6-2015 Nghim thu dch v cho d n 23

    3.2. Dch vELAN lin tnh

    Mc ch bi

    test

    o kim dch vELAN lin t nh

    M hnh mng

    My o

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit bCc bc thchin

    Cu hnh dch vE-LAN gi a Tester 1, Tester 2 v Tester 3 (VT tnh v CTINthc hin)

    1. To kt ni nh s m ng2. Cu hnh dch vE-LAN theo ki n trc H-VPLS. ASR-1 khi to VFI. U-PE 1, U-

    PE 2, U-PE 3 xconnect ti ASR-1 v Pe-Agg-2 Router3. Disable tnh nng split horizon cho EoMPLS gia ASR-1 v U-PE 1, gia ASR-1

    v U-PE 3, gia Pe-Agg-2 v U-PE 24. Cu hnh a ch 3 Tester n m trong cng 1 Subnet

  • 7/25/2019 MEN21 Project Test 1.4

    25/60

    7-6-2015 Nghim thu dch v cho d n 24

    Cu hnh knh Layer 2 gia PE-1 v PE-2 (VTN thc hin)1. Cu hnh knh Layer2 trn VN2 Core, truyn ti VLAN t MAN-E 1 sang MAN-E

    2

    Test dch v E-LAN

    1. Kim tra EoMPLS

    Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail

    Trn ASR9k:Show l2vpn bridge-domain pw-id

    Show l2vpn bridge-domain pw-id detail

    2. Kim tra thng schuy n cc gi tin kch ckhc nhau gi a 3 Tester 1

    t tc trn link c a UPE Router ni n my o l 1Gbps.Thc hin truyn lu lng gia t tester 1 n Tester 2 v Tester 3, sd ng cctc 75%, x%, 100% v i cc kch c khc nhau: 64, 512, 1024, 1500, 2048.Trong x% l tc m t i , packet loss =0, latency n nh. Thi lng chomi tc l 90s.Ghi li kt qu nh bng di:

    Tc

    Packet Size75% x% 100%

    64latencypacket lossjitter

    75% x% 100%

    512latencypacket lossjitter

    75% x% 100%

    1024latencypacket lossjitter

    75% x% 100%

    150latencypacket lossjitter

    75% x% 100%

    2048latencypacket lossjitter

    3. Kim tra vic hc a ch MAC trn ASR-1Show mac-accounting

  • 7/25/2019 MEN21 Project Test 1.4

    26/60

    7-6-2015 Nghim thu dch v cho d n 25

    4. Kim tra thng sCPU trn thi t bshow process cpu

    Cu hnh mu - U-PE 1 & U-PE 3 RouterInterface gi1/0/0Description Connect To Testerservice instance 100 ethernet

    encapsulation defaultxconnect 100 encapsulation mpls

    - ASR-1 Router

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    rewrite ingress tag pop 1

    !

    l2vpn

    bridge group E-LAN-100

    bridge-domain 100

    int gigabitE0/0/1/0.100

    vfi E-LAN-100

    neighbor pw-id 100

    neighbor pw-id 100

    - U-PE 2 Router

    Interface gi1/0/0Description Connect To Tester 2service instance 100 ethernetencapsulation defaultxconnect 100 encapsulation mpls

    - PE-AGG 2 Router

    Interface gi1/0/0Description Connect To PE2service instance 100 ethernetencapsulation dot1q 100rewrite ingress tag pop 1 symmetricxconnect 100 encapsulation mpls

    Kt qu

    mong mun

    1. Cc EoMPLS PW u tr ng thi UP

    2. Tc truy n thng cc loi gi tin gia Tester 1 v Tester 2 c m bo nhtrong bng:

    Tc

    Packet Size75% x% 100%

    64latency

  • 7/25/2019 MEN21 Project Test 1.4

    27/60

    7-6-2015 Nghim thu dch v cho d n 26

    512latency

  • 7/25/2019 MEN21 Project Test 1.4

    28/60

    7-6-2015 Nghim thu dch v cho d n 27

    3.3 Dch vHSIipDSLAM Access

    Mc ch bitest

    o kim dch vHSI ipDSLAM AccessGil p vic ngt kt ni gia PE-AGG v BRAS

    M hnh mng

    My o

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin

    Cu hnh dch vHSI

    1. To kt ni nh s m ng2. Cu hnh cng kt ni tU-PE xu ng DSLAM3. Cu hnh Pseudowire gia U-PE v ASR-1, backup peer ti PE-AGG 24. Cu hnh DSLAM (phi hp vi VT tnh)5. Thit lp PPPoE t PC16. Cu hnh chng thc v thit lp PPPoE trn BRAS 1 (phi hp vi VT tnh)

    Test dch v HSI

  • 7/25/2019 MEN21 Project Test 1.4

    29/60

    7-6-2015 Nghim thu dch v cho d n 28

    1. Kim tra Pseudowire. ng primary tr ng thi UP v ng backup tr ng thiSTANDBYU-PE#show mpls l2 vc 110

    Local intf Local circuit Dest address VC ID

    Status------------- -------------------------- --------------- ----------

    ----------

    Gi4/20 Eth VLAN 110 3.3.3.3 110

    UP

    Gi4/20 Eth VLAN 110 4.4.4.4 110

    STANDBY

    2. Kim tra kt ni tPC ra internet

    Thc hin truy nhp vo cc trang web interface tPC

    3. Kim tra tc d ch vHSI

    Trn PC thc hin download & upload file tFTP server. Ghi l i kt qu v t c download & upload

    Test dphng khi c s c v i PE-AGG 1

    1. Ngt kt ni primary hng U-PE ti ASR-1 bng cch shutdown Service Instancetrn ASR-1. Kim tra kt ni backup ti PE-AGG2

    ASR-1(config)#int gi 4/20

    ASR-1 (config-if)#service instance 110 ethernet

    ASR-1 (config-if-srv)#shut

    U-PE#show mpls l2 vc 110

    Local intf Local circuit Dest address VC ID

    Status

    ------------- -------------------------- --------------- ----------

    ----------

    Gi4/20 Eth VLAN 110 3.3.3.3 110

    DOWN

    Gi4/20 Eth VLAN 110 4.4.4.4 110

    UP

    2. Kim tra kt ni tPC ra internet

    3. Kim tra tc d ch vHSI

    Trn PC thc hin download & upload file tFTP server. Ghi l i kt qu v t c download & upload

    Cu hnh mu - U-PE Router

    Interface gi4/20

    Description Connect to Tester

    service instance 100 ethernet

    encapsulation dot1q 100

    rewrite ingress tag push dot1q 100

  • 7/25/2019 MEN21 Project Test 1.4

    30/60

    7-6-2015 Nghim thu dch v cho d n 29

    xconnect 100 encapsulation mpls

    backup peer 100

    - ASR-1 Router

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    !

    l2vpn

    xconnect group HSI

    p2p HSI

    interface GigabitEthernet0/0/1/0.100

    neighbor ipv4 pw-id 100

    !

    - PE-AGG 2 Router

    Interface gi9/20

    Description Connect to BRAS

    service instance 100 ethernet

    encapsulation dot1q 100

    xconnect 100 encapsulation mpls

    Kt qu

    mong mun

    1. PC c thtruy nh p internet

    2. Tc download, upload c a PC t tc cho php c a gi cc.

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    31/60

    7-6-2015 Nghim thu dch v cho d n 30

    3.4 Dch vIPTV-VoD

    Mc ch bi

    test

    o kim dch vIPTV, VoD.

    Gil p vic ngt kt ni gia ASR-1 v PE1

    M hnh mng

    My o

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin

    Cu hnh dch vMulticast IPTV, VoD VASC

    1. To kt ni nh s m ng. Chun b Modem, Setopbox v TV.2. Cu hnh PIM SSM gia cc Router thuc mng MAN-E v mng VN23. Cu hnh VRRF gia PE1 v PE2 (phi hp vi VTN)4. Cu hnh ELAN gia U-PE, ASR-1 v PE-AGG2 cho dch vVoD. VFI t ti U-

    PE.5. Cu hnh Interface kt ni t UPE xu ng iPDSLAM bt lu lng VoD v

    Multicast6. Cu hnh IPTV cho DSLAM (phi hp vi VT tnh) vi bng thng quy hoch cho

    dch vIPTV.7. Cu hnh Modem, STB (phi hp vi VT tnh chun b account test)

    Test dch vMulticast IPTV

    1. Kim tra PIM SSM

    Trn UPE:

    Show ip pim neighbor

  • 7/25/2019 MEN21 Project Test 1.4

    32/60

    7-6-2015 Nghim thu dch v cho d n 31

    Trn ASR:Show pim neighbor

    2. Kim tra bng nh tuyn multicast

    Trn UPE:Show ip mroute

    Trn ASR:Show mrib route

    3. Test xem cc knh Multicast, VoD v kim tra cht lng hnh nh.

    Test dphng d ch v VoD khi c s c v i PE-AGG 1

    1. Ngt kt ni hng U-PE ti ASR-1 bng cch shutdown sub-interface trn PE-AGG1. Kim tra kt ni ti PE-AGG2

    ASR-1(config)#interface GigabitEthernet0/0/1/10.100 PE-AGG1ASR-1(config-subif)#shut

    U-PE#show mpls l2 vc 100

    2. Test xem cc knh VoD v kim tra cht lng hnh nh.

    Cu hnh mu - U-PE Router

    Interface gi1/0/0Description Connect to ipDSLAMservice instance 99 ethernet

    encapsulation dot1q 99rewrite ingress tag pop 1 symmetricbridge-domain 99 split-horizon

    service instance 100 ethernetencapsulation dot1q 100bridge-domain 100 split-horizon

    vlan 100name VoD-100

    interface Vlan100

    mtu 9000no ip addressxconnect vfi VOD_VASC_TEST

    l2 vfi VOD_VASC_TEST manualvpn id 100neighbor encapsulation mpls no-split-horizonneighbor encapsulation mpls no-split-horizon

    vlan99name IPTV-99

    interface Vlan99mtu 9000ip unnumbered Loopback0

  • 7/25/2019 MEN21 Project Test 1.4

    33/60

    7-6-2015 Nghim thu dch v cho d n 32

    ip pim sparse-modeip igmp version 3

    ip igmp ssm-map enableip igmp ssm-map static SSM-MAP 123.29.128.4

    ip access-list standard SSM-MAP

    permit 232.84.1.0 0.0.0.255

    - ASR-1 Router

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    !

    l2vpn

    xconnect group VOD_VASC_TEST

    p2p VOD_VASC_TEST

    interface GigabitEthernet0/0/1/0.100

    neighbor ipv4 pw-id 100

    !

    - PE-AGG 2 Router

    Interface gi1/0/0Description Connect to PE 2service instance 100 ethernetencapsulation dot1q 100

    xconnect 100 encapsulation mpls

    Kt qu

    mong mun

    1. Cc Router trong mng MAN-E thit lp PIM neighbour2. Bng mroute cha y thng tin v cc tuy n ng ti cc multicast group3. Xem IPTV hnh nh r nt, khng git hnh, chuyn knh nhanh.4. Xem VoD hnh nh r nt, khng git hnh.5. Khi ngt kt ni hng ASR-1, dch vVoD v n chy tt qua hng PE-AGG2

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    Ngy thng . nm

    I DIN VNPT

    CHC DANH

    Ngy thng . nm

    I DIN VNPT

    CHC DANH

  • 7/25/2019 MEN21 Project Test 1.4

    34/60

    7-6-2015 Nghim thu dch v cho d n 33

    TN NGI I DIN TN NGI I DIN TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    35/60

    7-6-2015 Nghim thu dch v cho d n 34

    3.5 Dch vVoIP

    Mc ch bi

    test

    o kim dch vVoIP

    M hnh mng

    My o Agilent/HST3000

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin

    Cu hnh dch vVoIP

    1. To kt ni nh s m ng. Tester 1 ng vai tr l Client, Tester 2 ng vai tr lVoice Server

    2. Cu hnh EoMPLS gia U-PE 1 v ASR-13. Cu hnh MPLS L3 VPN gia PE1 v PE2 (thc hin bi VN2 Team)4. Cu hnh Tester1 trdefault gateway t i PE1, Tester 2 trdefault gateway t i PE2

  • 7/25/2019 MEN21 Project Test 1.4

    36/60

    7-6-2015 Nghim thu dch v cho d n 35

    Test dch v VoIP

    1. Kim tra EoMPLS

    Trn UPE:

    Show mpls l2transport vc Show mpls l2transport vc detail

    Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail

    2. Gi l p lu lng Voice gi n gia 2 Tester vi cc thng s:- Speed: 5M- MTU: 98bytes.

    o kim cc thng s: Latency, Frame Loss, Jitter.3. Trn PC, s d ng phn mm Softphone (VD: X-Lite, Kapanga) gia 2 PC th . o

    kim thng scu c gi VoIP (MOS) nu c.

    Cu hnh mu - U-PE Router

    Interface gi1/0/0Description Connect to Testerservice instance 100 ethernetencapsulation defaultxconnect 100 encapsulation mpls

    - ASR-1 Router

    interface GigabitEthernet0/0/1/0.100 l2transportencapsulation dot1q 100

    !

    l2vpn

    xconnect group VoIP

    p2p VoIP

    interface GigabitEthernet0/0/1/0.100

    neighbor ipv4 < MAN-E Access > pw-id 100

    !

    Kt qu

    mong mun

    1. Cc EoMPLS PW u tr ng thi UP2. 2 my o gi v nhn lu lng thnh cng.- Latency

  • 7/25/2019 MEN21 Project Test 1.4

    37/60

    7-6-2015 Nghim thu dch v cho d n 36

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    38/60

    7-6-2015 Nghim thu dch v cho d n 37

    3.6 Dch vMobile Backhaul

    Mc ch bitest

    m bo dch v c QoS vi cc gi tr c thit lp sn ca NodeB khi i qua mng.Hn chbng thng v m bo cht lng dch v.

    M hnh mng

    My o Agilent/HST3000

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin Cu hnh dch vMobile Backhaul

    1. To kt ni nh s m ng. Tester 1 ng vai tr l NodeB, Tester 2 ng vai trl RNC

    2. Cu hnh Switch truy n ti lu lng Vlan tTester U-PE3. Cu hnh Pseudowire theo m hnh VFI gia UPE v ASR-14. Cu hnh L2VPN gia PE1 v PE2 (thc hin bi VN2 Team)

  • 7/25/2019 MEN21 Project Test 1.4

    39/60

    7-6-2015 Nghim thu dch v cho d n 38

    5. Trn PE Cu hnh trust qos cc port u ni xung MAN-E v RNC (thc hin biVN2 Team)

    Test dch v Mobile Backhaul

    1. Kim tra EoMPLS

    Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail

    Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail

    2. p policy gii hn bng thng v cu hnh trust port vo interface xung testermls qosmls qos marking ignore port-trust!

    policy-map policing_3G_10M_inclass class-defaultpolice cir 10000000 conform-action transmit exceed-action drop

    !

    3. Gi l p lu lng Data gi t Tester 1 n Tester 2. Bn 8 lung traffic vi thngs:

    - CoS: 0-7

    - Bandwidth: 2 MB/traffic- Vlan:100

    4. Kim tra trn UPE: lu lng c QoS ca MAN-E x l theo ng vi gi trCoS m Tester 1 gi ln. Gi trCoS Tester g i ln tng ng vi gi tr EXP QoStrong mng. Bng thng gii hn 10MB

    Show policy-map interface gigabitethernet1/0/0

    Show policy-map interface Tengigabitethernet1/0/0

    Kim tra trn Tester2 lu lng nhn c l ~ 10MB

  • 7/25/2019 MEN21 Project Test 1.4

    40/60

    7-6-2015 Nghim thu dch v cho d n 39

    Cu hnh mu - U-PE Router

    mls qosmls qos marking ignore port-trust!policy-map policing_3G_10M_in

    class class-defaultpolice cir 10000000 conform-action transmit exceed-action drop

    !vlan 100name Test 3G

    !Interface gix/x/xdescription Connect to Tester1

    mls qos trustservice instance 100 ethernetencapsulation dot1q 100bridge-domain 100service-policy input policing_3G_10M_in

    !l2 vfi mobile_backhaulvpn id 100neighbor encapsulation mpls no-split-horizon

    !interface vlan 100description for 3Gno ip addressno shutxconnect vfi mobile_backhaul

    !

    - ASR-1 Router

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    !

    l2vpn

    bridge group mobile_backhaul

  • 7/25/2019 MEN21 Project Test 1.4

    41/60

    7-6-2015 Nghim thu dch v cho d n 40

    bridge-domain 100

    int gigabitE0/0/1/0.100

    vfi E-LAN-100

    neighbor pw-id 100

    Kt qu

    mong mun

    1. Cc EoMPLS PW u tr ng thi UP2. 2 my o gi v nhn lu lng thnh cng. Lu lng truyn i trn Tester 1 l

    16MB, lu lng nhn vtrn tester 2 l 10MB- Latency

  • 7/25/2019 MEN21 Project Test 1.4

    42/60

    7-6-2015 Nghim thu dch v cho d n 41

    4. Service ProtectionMc ch bitest

    o kim kh nng bo v d ch vb ng tnh nng MPLS TE FRR

    M hnh mng

    My o

    Ngi test

    Thng stest Ngy thc hin

    TrmThit b

    Cc bc thchin

    Cu hnh link protection cho ring gm 5 thit b: ASR-1, PE-AGG 2, UPE 1, UPE2, UPE 3

    1. To kt ni nh s m ng2. Cu hnh cc primary tunnel & backup tunnel nh b ng di y

    Link Traffic Flow Primary Tunnel Backup Tunnel

  • 7/25/2019 MEN21 Project Test 1.4

    43/60

    7-6-2015 Nghim thu dch v cho d n 42

    ASR-1PE-Agg 2ASR-1Pe-Agg 2 ASR-1 Pe-Agg 2

    ASR-1UPE 1 UPE 2UPE 3 PE-Agg 2

    PE-Agg 2ASR-1 PE-Agg 2 ASR-1PE-Agg 2UPE 3 UPE2UPE 1 ASR-1

    PE-Agg 2UPE 3

    PE-Agg2UPE 3 PE-Agg2 UPE 3PE-Agg 2ASR-1 UPE1UPE 2 UPE 3

    UPE 3PE-Agg 2 UPE 3 PE-Agg 2 UPE 3UPE 2 UPE 1 ASR-1PE-Agg 2

    UPE 3UPE 2 UPE 3 UPE 2 UPE 3 UPE 2UPE3PEAgg2 ASR1

    UPE1 UPE2

    UPE 2UPE 3 UPE 2 UPE 3UPE2UPE1 ASR1 PEAgg2UPE3

    UPE 2UPE 1 UPE 2 UPE 1 UPE 2 UPE 1UPE2UPE3 PEAgg2

    ASR1 UPE1

    UPE 1UPE 2 UPE 1 UPE 2UPE1ASR1 PEAgg2

    UPE3 UPE2

    UPE 1ASR1 UPE 1 ASR1 UPE 1 ASR1UPE 1UPE 2 UPE 3 PE-Agg 2ASR1

    ASR1UPE 1 ASR1 UPE 1ASR1PE-Agg 2 UPE3UPE 2 UPE 1

    3. Cu hnh Pseudowire gia Tester 1 v Tester 24. Cu hnh a ch cho Tester 1 v Tester 2 n m trong 1 subnet

    Test kh nng dphng cho link b ng TE FRR

    1. Kim tra cc primary tunnel v backup tunnel

    Trn UPE:show mpls traffic-eng tunnels tunnel

    Trn ASR:show mpls traffic-eng tunnels

    2. Kim tra d phng cho cc link b ng TE FRR

    - Truyn lu lng gia Tester 1 v Tester 2 vi tc tng ng1000packet/s.

    - Rt mt link bt k. V d: link gia U-PE 1 v ASR-1

    - Kim tra spacket loss trn my o.

    3. Kim tra ng i t UPE 1 t i ASR-1 lc rt linkUPE#Traceroute

    Cu hnh mu - Tunnel c cu hnh sn trn mng. Kim tra li chnh xc cc Tunnel.

    - Cu hnh Pseudowire gia Tester 1 v Tester 2- Trn UPE1 :

    Interface gi 4/1

    Service Instance 100 ethernet

    Encapsulation dot1q 100

    Xconnect 100 encapsulation mpls

  • 7/25/2019 MEN21 Project Test 1.4

    44/60

    7-6-2015 Nghim thu dch v cho d n 43

    - Trn ASR-1 :

    interface GigabitEthernet0/0/1/0.100 l2transport

    encapsulation dot1q 100

    !

    l2vpn

    xconnect group Test

    p2p Test

    interface GigabitEthernet0/0/1/0.100

    neighbor ipv4 < UPE loopback IP > pw-id 100

    !

    Kt qumong mun

    1. Primary Tunnel v Backup Tunnel u tr ng thi UP. Backup Tunnel sn sang dphng cho Primary Tunnel

    2. S lng packet loss < 50 packet lc rt link

    Failed link Packet loss

    U-PE 1ASR-1 < 50 packets

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch: 1 packet loss tng ng vi 1ms hi t.

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    45/60

    7-6-2015 Nghim thu dch v cho d n 44

    5. QoS Test

    Mc ch bitest

    Kim tra vic cu hnh QoS trn mng

    M hnh mng

    My o Agilent N2X/HST3000

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Cc bc thchin

    Cu hnh QoS trn cc U-PE Router

    1. To kt ni nh s m ng2. Cu hnh QoS trn cc U-PE Router, cc tham s nh sau:

  • 7/25/2019 MEN21 Project Test 1.4

    46/60

    7-6-2015 Nghim thu dch v cho d n 45

    (tham chiu theo bng Quy nh ch tiu ch t lng mng)

    3. Cu hnh dch vE-LINE gia Tester 1 v Tester 2. Sd ng 5 VLAN: 10, 20, 30,40, 50 tng ng vi 5 class b ng trn4. Cu hnh nh du lu lng trn MAN-E Access 2 Router theo bng sau:

    VLAN MPLS EXP50 540 430 320 210 1

    5. t a chcc knh E-LINE trn cc tester cng subnet

    Test QoS

    6. Kim tra cc class trn UPE 1Show class-map

    7. Pht lu lng gia Tester1 v Tester 2 :pht 5 lung tng ng vi 5 vlan cgn gi tr EXP tng ng, cc gi tin c packet length ln lt l 64 bytes, 256bytes, 512 bytes, 1024 bytes, 1518 byte .

    8. Thc hin truyn lu lng gia Tester 1, Tester 2 vi cc tham stheo b ng diy:

    STT Kch thc gi tin Lu lng ca cc lung (Mbps)

    1 64 10

    2 2 6 10

    3 512 10

    4 1024 10

    5 1518 10

  • 7/25/2019 MEN21 Project Test 1.4

    47/60

    7-6-2015 Nghim thu dch v cho d n 46

    9. Kim tra packet loss ca cc VLAN. Ghi li kt qu

    VLAN Packet loss Latency Jitter50

    40302010

    Cu hnh mu Trn interface k t n i ti my o

    interface GigabitEthernet x/ymtu 9000no ip addressservice instance 10 ethernetencapsulation dot1q 10service-policy input SET_EXP1

    xconnect a.a.a.a 10 encapsulation mpls!service instance 20 ethernet

    encapsulation dot1q 20service-policy input SET_EXP2xconnect a.a.a.a 20 encapsulation mpls

    !service instance 30 ethernet

    encapsulation dot1q 30service-policy input SET_EXP3xconnect a.a.a.a 30 encapsulation mpls

    !service instance 40 ethernet

    encapsulation dot1q 40service-policy input SET_EXP4

    xconnect a.a.a.a 40 encapsulation mpls!service instance 50 ethernet

    encapsulation dot1q 50service-policy input SET_EXP5xconnect a.a.a.a 50 encapsulation mpls

    !

    policy-map SET_EXP

    class class-default

    set mpls experimental imposition

    ASR QoS 10GE configuration!

    !class-map match-any CONTROLmatch cos 6 7match mpls experimental topmost 6 7match dscp ipv4 48match precedence ipv4 6 7

    !!class-map match-any REAL-TIMEmatch cos 5match mpls experimental topmost 5match dscp ipv4 46match precedence ipv4 5

  • 7/25/2019 MEN21 Project Test 1.4

    48/60

    7-6-2015 Nghim thu dch v cho d n 47

    !class-map match-any VIDEOmatch cos 4match mpls experimental topmost 4match dscp ipv4 34match precedence ipv4 4

    !

    class-map match-any CRITICAL-DATA1match cos 3match mpls experimental topmost 3match dscp ipv4 26match precedence ipv4 3

    !class-map match-any CRITICAL-DATA2match cos 2match mpls experimental topmost 2match dscp ipv4 18match precedence ipv4 2

    !class-map match-any BUSINESS-HSImatch cos 1

    match mpls experimental topmost 1match dscp ipv4 10match precedence ipv4 1

    !

    policy-map 10GE_OUT!! Real-time traffic is prioritized but only allows up to150Mbps!class REAL-TIMEpolice cir 150000000 conform-action transmit exceed-actiondroppriorityqueue-limit 20625 packets

    !! Control traffic is guaranteed minimum bandwidth 1% ofinterface bandwidth!class CONTROLbandwidth percent 1

    !!! Video traffic is guaranteed minimum bandwidth 30% ofinterface bandwidth!class VIDEObandwidth percent 30queue-limit 4278 packets

    !! Critical-Data1 is guaranteed minimum bandwidth 30% ofinterface bandwidth! Using WRED for congestion avoidance!class CRITICAL-DATA1bandwidth percent 15random-detect aggregaterandom-detect precedence values 2 minimum-thresh 9375maximum-thresh 28125 mark-prob 1random-detect precedence values 3 minimum-thresh 15000maximum-thresh 45000 mark-prob 1

    !! Critical-Data2 is guaranteed minimum bandwidth 10% ofinterface bandwidth

    ! Using WRED for congestion avoidance

  • 7/25/2019 MEN21 Project Test 1.4

    49/60

    7-6-2015 Nghim thu dch v cho d n 48

    !class CRITICAL-DATA2bandwidth percent 10random-detect aggregaterandom-detect precedence values 2 minimum-thresh 9375maximum-thresh 28125 mark-prob 1random-detect precedence values 3 minimum-thresh 15000

    maximum-thresh 45000 mark-prob 1!! Business HSI is guaranteed minimum bandwidth 14% of interfacebandwidth! Using WRED for congestion avoidance!class BUSINESS-HSIbandwidth percent 14random-detect aggregaterandom-detect precedence values 0 minimum-thresh 4861maximum-thresh 14583 mark-prob 1random-detect precedence values 1 minimum-thresh 6944maximum-thresh 20833 mark-prob 1

    !

    ! Any traffic that does not match 7 classes above is classifiedto classdefault.! Class-default uses Fair-queue and WRED and not is guaranteedbandwidth.!class class-defaultrandom-detect aggregaterandom-detect precedence values 0 minimum-thresh 4861maximum-thresh14583 mark-prob 1random-detect precedence values 1 minimum-thresh 6944maximum-thresh20833 mark-prob 1

    !! Apply Policy-map onto each TenGigabit Interface towards U-PE

    !or PE-Agg router!interface TenGigabitEthernet w/x/y/z1service-policy output 10GE_ES20_OUT!!interface TenGigabitEthernet w/x/y/z1service-policy output 10GE_ES20_OUT!commit!

    Kt qu

    mong mun

    1. Ch c default-class b drop lc x y ra tc nghn

    LAN Packet loss Latency Jitter50 < 0,0001%

  • 7/25/2019 MEN21 Project Test 1.4

    50/60

    7-6-2015 Nghim thu dch v cho d n 49

    2. Cc policy-map cu hnh trn cc router hot ng, kim tra bng lnh:showpolicy-map interface output

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch:

    Xc nhn Ngy thng nm

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    51/60

    7-6-2015 Nghim thu dch v cho d n 50

    6. Verify Security Configuration

    TEST SETUP

    Mc ch bi test - Kim tra kh nng bo vcontrol-plane

    - Kim tra kh nng hn chARP request

    - Kim tra kh nng gii hn gi tin hardware rate limiter

    M t Cc c chb o mt c xy dng nhm ngn chn vic tn cng DDoS vo routeprocessor, cng nh hn chcc gi tin ARP attack v gi m cc gi tin multicast c xl trong bx l trung tm t i mc ngng cn thit. Chi tit cc bc thc hin bao gm :

    Trn UPE Router 7600:- show policy-map control-plane: ki m tra cc loi gi tin c phn loi v xl

    trong route processor.

    - show mls qos arp: Hi n th thng tin v ARP entries c lu trong ARP table.

    - show mls rate-limit usage : Kim tra trng thi gii hn cc loi gi tin c xl trong harware.

    Trn ASR9k :

    - Show lpts bindings : kim tra cc loi gi tin c phn loi v xl. RP/0/RSP0/CPU0:ASR#sh lpts bindings location 0/RSP0/CPU0 brief

    Tue Mar 10 02:44:28.638 UTC

    @ - Indirect binding; Sc - Scope

    Clnt Sc L3 L4 VRF-ID Interface Local-

    Address,Port Remote-Address,Port

    ---- -- ---- ------ -------------------- ------------ ------------

    --------------------------

    IPV4 LO IPV4 ICMP * any any,ECHO any

    IPV4 LO IPV4 ICMP * any any,TSTAMP

    any

    IPV4 LO IPV4 ICMP * any any,MASKREQ

    any

    IPV6 LO IPV6 ICMP6 * any any,ECHOREQ

    any

    IPV6 LO IPV6 ICMP6 * any

    any,NDRTRSLCT any

    IPV6 LO IPV6 ICMP6 * any any,NDRTRADV

    any

    IPV6 LO IPV6 ICMP6 * any

    any,NDNBRSLCT any

    IPV6 LO IPV6 ICMP6 * any any,NDNBRADV

    any

    IPV6 LO IPV6 ICMP6 * any

    any,NDREDIRECT any

  • 7/25/2019 MEN21 Project Test 1.4

    52/60

    7-6-2015 Nghim thu dch v cho d n 51

    BFD LO IPV4 UDP * any any any

    TCP LR IPV4 TCP default any any,23 any

    TCP LR IPV4 TCP default any any,646 any

    UDP LR IPV4 UDP default any any,3503 any

    UDP LR IPV4 UDP default any any,496 any

    UDP LR IPV4 UDP default any any,3232 anyRAW LR IPV4 RAW default any any any

    RAW LR IPV4 RAW default any any any

    RAW LR IPV4 IGMP default any any any

    RAW LR IPV4 IGMP default Te0/1/0/1 any any

    RAW LR IPV4 IGMP default Te0/1/0/2 any any

    RAW LR IPV4 IGMP default Lo0 any any

    RAW LR IPV4 PIM default any any any

    RAW LR IPV4 L2TPV3 default any any any

    RAW LR IPV4 RSVP default any any any

    RAW LR IPV4 RSVP default Te0/1/0/1 any any

    RAW LR IPV4 RSVP default Te0/1/0/2 any any

    CLNS LR CLNS - default Te0/1/0/1 - -

    CLNS LR CLNS - default Gi0/0/1/9.99 - -

    CLNS LR CLNS - default Te0/1/0/2 - -

    CLNS LR CLNS - default Te0/1/0/0 - -

    Phng tin o 01 Laptop/1 Router

    Ngi test CTIN:

    01 k s CTIN

    Thng stest Ngy thc hin

    Trm

    Thit b

    Kt qu

    mong mun

    1. Cc class c phn loi x l trong control-plane theo cc m c bng thng phhp, software counters v hardware counter hin th cc class c phn loi vc chuyn mch

    2. Cc ARP entries lu trn ARP table m c gii hn 32000bps, m bo thng scc gi tin ARP tnh theo n v Byte c forward i trn cc linecard v nuvt qu 32000bps s c hn ch.

    3. Tc gi i hn cho cc loi gi tin ng nh cu hnh

    Kt qu

    1. Cc class c phn loi x l trong control-plane theo cc m c bng thng phhp

    2. Cc ARP entries lu trn ARP table m c gii hn 32000bps.

    3. Tc gi i hn cho cc loi gi tin ng nh cu hnh

  • 7/25/2019 MEN21 Project Test 1.4

    53/60

    7-6-2015 Nghim thu dch v cho d n 52

    nh gi t Khng t t 1 phn Khng test

    Chi ch:

    Xc nhn Ngy thng nm

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng nm

    I DIN VNPT

    CHC DANH

    \

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    54/60

    7-6-2015 Nghim thu dch v cho d n 53

    7. IPv6 Test

    IPv6 over L2VPN

    Mc ch bitest

    Kim tra tnh nng IPv6 trn h th ng:

    - Kh nng truyn ti IPv6 thng qua L2VPN.

    M hnh mng

    Cc bc thchin

    - Cu hnh dch vELINE gi a U-PE 1 v U-PE 2- Tester 1 gil p 2 lu lng vi tham s nh sau:

    o Lu lng IPv4 : a chngu n v ch s d ng IPv4. Speed : 200M,MTU : 1500

    o Lu lng IPv6 : a chngu n v ch s d ng IPv6, speed : 200M,MTU :1500

    - Tester 2 s th c hin vic loopback lu lng tr ngc vTester 1.

    Cu hnh mu - Trn UPE-1 Router 7600:interface GigabitEthernet1/0/1mtu 1560

    ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64ipv6 router isisno mls qos trustmpls ipisis circuit-type level-1isis network point-to-point

    endrouter isisnet 49.0001.0020.0200.2002.00is-type level-1passive-interface Loopback0!address-family ipv6

  • 7/25/2019 MEN21 Project Test 1.4

    55/60

    7-6-2015 Nghim thu dch v cho d n 54

    redistribute connectedexit-address-family

    !

    - Trn ASR-1:

    interface TenGigE0/1/0/1

    cdpmtu 9014ipv4 mtu 9000ipv4 address 24.0.0.3 255.255.255.0ipv6 address 192:168:2::15/64load-interval 30dampening

    !

    router isis

    set-overload-bit on-startup 180

    is-type level-1

    net 49.0092.1230.2906.0005.00

    nsf ietf

    lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50

    lsp-refresh-interval 65000

    max-lsp-lifetime 65535

    address-family ipv4 unicast

    metric-style wide

    metric-style wide level 1

    metric 100

    ispf level 1

    mpls traffic-eng level-1

    mpls traffic-eng router-id Loopback0

    mpls traffic-eng multicast-intact

    spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50

    !interface Loopback0

    passive

    address-family ipv4 unicast

    tag 1000

    !

    !

    interface TenGigE0/1/0/1

    circuit-type level-1

    point-to-point

    hello-password keychain ISIS

    address-family ipv4 unicast

    !

    !

    My o HST-3000

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

  • 7/25/2019 MEN21 Project Test 1.4

    56/60

    7-6-2015 Nghim thu dch v cho d n 55

    Kt qu

    mong mun

    - Kt qu show cc tnh nng: - Tester gi v nhn c hai lu lng thnh cng.

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

  • 7/25/2019 MEN21 Project Test 1.4

    57/60

    7-6-2015 Nghim thu dch v cho d n 56

    IPv6 dual-stack

    Mc ch bi

    test

    Kim tra tnh nng IPv6 trn h th ng:

    - ICMPv6

    - NDP

    - Established IS-IS v6 Neighbor

    - Bng nh tuyn IPv6

    - Tnh nng truyn ti lu lng IPv4-IPv6 ng thi.

    M hnh mng

    Cc bc thc

    hin

    - Cu hnh a ch IPv6 trn cc Router.

    - Cu hnh giao thc nh tuyn IS-IS htr IPv6.- Cu hnh nh tuyn IPv6 trn tt ccc interface c ch y IPv6.

    - Kim tra cc thng strn Router v giao th c IPv6 S d ng cc lnh :

    o Kim tra ICMPv6 :ping ipv6 x :x :x :x ::x

    o Kim tra tnh nng NDP :show ipv6 interface gix/x/x

    o Kim tra giao thc cho IPv6 :

    Trn router 7600:

    show ipv6 protocol

    Trn router ASR9k:

    Show ipv6 traffico Kim tra kh nng thit lp quan hIPv6 gi a cc router :show ipv6

    neighbors

    o Bng nh tuyn IPv6 :

    Trn router 7600:

    show ipv6 route isis

    Trn ASR9k:

    show route ipv6 isis

    - Tester 1 gil p 2 lu lng vi tham s nh sau:

    o Lu lng IPv4 : a chngu n v ch s d ng IPv4. Speed : 200M,MTU : 1500

    o Lu lng IPv6 : a chngu n v ch s d ng IPv6, speed : 200M,MTU :1500

    - Tester 2 s th c hin vic loopback lu lng tr ngc vTester 1.

    Cu hnh mu - Trn UPE-1 Router 7600:interface GigabitEthernet1/0/1mtu 1560ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64

    ipv6 router isis

  • 7/25/2019 MEN21 Project Test 1.4

    58/60

    7-6-2015 Nghim thu dch v cho d n 57

    no mls qos trustmpls ipisis circuit-type level-1isis network point-to-point

    endrouter isisnet 49.0001.0020.0200.2002.00

    is-type level-1passive-interface Loopback0!address-family ipv6redistribute connected

    exit-address-family!

    - Trn ASR-1:

    interface TenGigE0/1/0/1cdpmtu 9014ipv4 mtu 9000

    ipv4 address 24.0.0.3 255.255.255.0ipv6 address 192:168:2::15/64load-interval 30dampening

    !

    router isis

    set-overload-bit on-startup 180

    is-type level-1

    net 49.0092.1230.2906.0005.00

    nsf ietf

    lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50

    lsp-refresh-interval 65000

    max-lsp-lifetime 65535

    address-family ipv4 unicastmetric-style wide

    metric-style wide level 1

    metric 100

    ispf level 1

    mpls traffic-eng level-1

    mpls traffic-eng router-id Loopback0

    mpls traffic-eng multicast-intact

    spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50

    !

    interface Loopback0

    passive

    address-family ipv4 unicast

    tag 1000

    !

    !

    interface TenGigE0/1/0/1

    circuit-type level-1

    point-to-point

    hello-password keychain ISIS

    address-family ipv4 unicast

    !

    !

  • 7/25/2019 MEN21 Project Test 1.4

    59/60

    7-6-2015 Nghim thu dch v cho d n 58

    My o HST-3000

    Ngi test

    Thng stest Ngy thc hin

    Trm

    Thit b

    Kt qu

    mong mun

    - Kt qu show cc tnh nng:ping ipv6 192:168:3::1

    Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192:168:3::1, timeout is 2seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/4 ms

    show ipv6 neighborsIPv6 Address Age Link-layer Addr StateInterfaceFE80::224:C4FF:FEDB:A240 8 0024.c4db.a240 STALEGi1/0/1192:168:2::2 9 0024.c4db.a240 STALEGi1/0/1

    show ipv6 inter gi 1/0/1GigabitEthernet1/0/1 is up, line protocol is up

    IPv6 is enabled, link-local address is FE80::224:C4FF:FEDB:A3C0No Virtual link-local address(es):Global unicast address(es):

    192:168:2::1, subnet is 192:168:2::/64Joined group address(es):FF02::1FF02::2FF02::1:FF00:1FF02::1:FFDB:A3C0

    MTU is 1560 bytesICMP error messages limited to one every 100 millisecondsICMP redirects are enabledICMP unreachables are sentOutput features: HW Shortcut InstallationND DAD is enabled, number of DAD attempts: 1ND reachable time is 30000 millisecondsND advertised reachable time is 0 milliseconds

    ND advertised retransmit interval is 0 millisecondsND router advertisements are sent every 200 secondsND router advertisements live for 1800 secondsND advertised default router preference is Medium

    show ipv6 route isisIPv6 Routing Table - default - 6 entriesCodes: C - Connected, L - Local, S - Static, U - Per-user Staticroute

    B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP

    externalO - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF

    ext 2

  • 7/25/2019 MEN21 Project Test 1.4

    60/60

    ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2I1 192:168:3::/64 [115/20]

    via FE80::224:C4FF:FEDB:A240, GigabitEthernet1/0/1

    - Tester gi v nhn c hai lu lng thnh cng.

    Kt qu

    nh gi t Khng t t 1 phn Khng test

    Ghi ch:

    Xc nhn Ngy thng nm .

    I DIN CT-IN

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN

    Ngy thng .nm

    I DIN VNPT

    CHC DANH

    TN NGI I DIN